Serial No.: 09/681,804 
Art Unit: 2131 

AMENDMENTS TO THE CLAIMS 

Please amend the claims as indicated hereafter. The present claim listing 
replaces all prior versions of the claims. 

Claims: 

1-28 (Canceled). 

29. (New) A method for authorizing execution of an object on a computer system 
comprising: 

(a) selecting an object on the computer system; 

(b) determining the presence or absence of a first identifier in a 
steganographic zone of the object, wherein the first identifier and the stenographic zone 
of the object are formed by the computer system; and 

(c) comparing the first identifier in the steganographic zone to a second 
identifier, wherein the object is executed if the first identifier matches the second 
identifier. 

30. (New) The method of claim 29, wherein the identifiers comprise a sequence of 
fields for creating a unique copy of the object and an ownership token between the 
object and the system. 

31. (New) The method of claim 29, wherein the second identifier is stored on the 
system. 

32. (New) The method of claim 29, wherein the second identifier is stored on an 
external data storage structure. 

33. (New) The method of claim 29, wherein the first identifier is extracted from the 
steganographic zone of the object. 
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34. (New) The method of claim 32, wherein the external data storage device 
comprises data for extracting the first identifier. 

35. (New) The method of claim 29, wherein the second identifier is encrypted. 

36. (New) A method for Identifying unauthorized objects on a computer system 
comprising: 

(a) authorizing objects of the computer system by embedding a system 
identifier into the authorized objects; 

(b) determining the presence of the system identifier in objects of the 
computer, wherein objects that are not embedded with the system identifier are 
unauthorized; and 

(c) isolating unauthorized objects from the computer system. 

37. (New) The method of claim 36, wherein the identifiers comprise a sequence of 
fields for creating a unique copy of the object and an ownership token between the 
object and the system. 

38. (New) The method of claim 36, wherein the system identifier is stored on the 
system. 

39. (New) The method of claim 36, wherein the system identifier is stored on an 
external data storage structure. 

40. (New) The method of claim 36, wherein the system identifier is embedded in a 
steganographic zone of the authorized object. 

41 . (New) The method of claim 36, wherein extracted from the steganographic zone 
of the object. 
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42. (New) The method of claim 39, wherein the external data storage device 
comprises data for extracting the system identifier. 

43. (New) The method of claim 36, wherein the system identifier is encrypted. 

44. (New) A method for authorizing objects of a computer system comprising: 

(a) selecting a set of objects for authorization; 

(b) generating a system identifier, wherein the system identifier is 
generated by the computer system using object fields; 

(c) embedding the selected objects with the system identifier; 

(d) storing the system identifier; 

(e) determining the presence of the system identifier on objects on the 
computer system; 

(f) comparing detected system identifiers on the objects of the 
computer system with the stored system identifier; and 

(g) isolating objects without a detectable system identifier or with a 
system identifier that does not match the stored system identifier. 

45. (New) The method of claim 44, wherein the system identifier comprises a 
sequence of fields for creating a unique copy of the object and an ownership token 
between the object and the system. 

46. (New) The method of claim 44, wherein the system identifier is stored on the 
system. 

47. (New) The method of claim 44, wherein the system identifier is stored on an 
external data storage structure. 
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48. (New) The method of claim 44, wherein the system identifier is embedded in a 
steganographic zone of the object. 

49. (New) The method of claim 48, wherein the system identifier is extracted from 
the steganographic zone of the object. 

50. (New) The method of claim 47, wherein the external data storage device 
comprises data for extracting the first identifier. 

51. (New) The method of claim 44, wherein the stored system identifier is encrypted. 

52. (New) A method for creation of authorized objects of a computer system 
comprising: 

(a) selecting an object for authorization; 

(b) retrieving a system identifier from a storage device; 

(c) embedding the selected object with the system identifier; and 

(d) storing data for retrieving the system identifier from the object on 
the storage device; 

53. (New) The method of claim 52, wherein the system identifier comprises a 
sequence of fields for creating a unique copy of the object and an ownership token 
between the object and the system. 

54. (New) The method of claim 52, wherein the system identifier is retrieved from an 
external data storage structure. 

55. (New) The method of claim 52, wherein the system identifier is embedded in a 
steganographic zone of the object. 

56. (New) The method of claim 54, wherein the external data storage device 
comprises data for extracting the first identifier. 

57. (New) The method of claim 52, wherein the stored system identifier is encrypted. 
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